Sign inSign up
Harbor Exporter

dhi.io/harbor-exporter

Harbor Exporter 2.13.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

2.13-debian-fips-dev, 2.13-debian13-fips-dev, 2.13-fips-dev, 2.13.6-debian-fips-dev, 2.13.6-debian13-fips-dev, 2.13.6-fips-dev

Index digest:

sha256:7ff6ef5c60bca6d15cf99a8d2edc15c0cb74542d6809dfd28a91f67b4a45484c

Manifest digest:

sha256:79f20b7801c67797f2c51ec8f97d4012fce19221c85685f2381eb923de999a9e

Size

41.14 MB

Last pushed

16 minutes ago

Vulnerabilities

0
0
0
1
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/harbor-exporter:2.13-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/harbor-exporter:2.13-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/harbor-exporter@sha256:268ce8a3f1f28f76394dbbd751279040105413c76a5f502966957517de3c618b
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/harbor-exporter@sha256:10b20589caae7e9f652c2ff185c8529d109c9016131b33fbdc73a5835ff90370
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/harbor-exporter@sha256:008214260e8ba9ba857bf762cd8c94770d27560a5bfd486559cc9290c20dffef
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/harbor-exporter@sha256:62d89dc965e6b9c2420df99c69294ad75543b29ad15a38ebffab167bed112723
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/harbor-exporter@sha256:01ae8149d8557e15c388c9bc9ca9a99bbc8f1c4d0648196643ec93e66db75200
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/harbor-exporter@sha256:d737ef7af54fe944654b30f5bf12e6fe0091615f37afc8f1fa3a0c1742620c8b
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/harbor-exporter@sha256:c4f939766d6a5c97dde7ed4e1ba414d6a965b073e1c15a597f96216bbc609342
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/harbor-exporter@sha256:82ffdb59559d47e26bc1238e8b49d2c40d875620b58a4d8a9f18f752bb6ebd3f
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/harbor-exporter@sha256:d7f020c63654c8710802db065145a7da4f0bb86b2f05deaaed1ec7313ad4e31d
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/harbor-exporter@sha256:ccd6bb731aca048585d532427af3b70bd99da5ce0229b917c03b3cd1cb9e76ea
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/harbor-exporter@sha256:868b942cba82961a22c0f39402a365fa1c6cefb4d80189abb8f877b89fcb8fb1
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/harbor-exporter@sha256:a715bfe4eb008b9045845e24f2cadd22f7da63797eb1eaaaa4f9d09d2275900d
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/harbor-exporter@sha256:5969483673dc58fa8e6522e4e8157ade5ae7dac0a74a05d4fe0bdf5d8de7e667
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/harbor-exporter@sha256:9a646e4a363b7031fff529717354e6efeebada4193e1a8514bb5f8da702e4a68
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/harbor-exporter@sha256:11a63eba95e4ddf8b35a45e96297f265f8954fe77515538c98f0cd61c6a3cccc
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/harbor-exporter@sha256:8e29f5de69d9359e2538f2b002d01724fd3b63cebfa66ada715e4399b8026ac8
SPDX SBOMhttps://spdx.dev/Documentdhi.io/harbor-exporter@sha256:88cf5e474fdcff9a53f9615cde68e318816798bd3ccaadd90f11978b2ca57bf0